Privacy policy

Plain words about what we collect on this website and in our games, why, and the choices you have. This policy applies to blueburp.com and to every BlueBurp Studio game on Google Play.

Last updated: Vivek Kumar · BlueBurp Studio · India

1. Who we are

BlueBurp Studio is the studio name and Google Play developer name used by Vivek Kumar, an individual, independent game developer based in India. In this policy "we", "us" and "BlueBurp" mean Vivek Kumar trading as BlueBurp Studio. We are the "data fiduciary" (India) or "controller" (EEA/UK) for the processing described here.

Privacy questions, requests and grievances go through the contact form (choose "Privacy or data request"). You can also email us at contact@blueburp.com. Vivek Kumar personally handles them.

2. What this policy covers

  • The website blueburp.com, including the contact form and optional analytics.
  • Our Android games published on Google Play under BlueBurp Studio: currently 2048 Tilewick, Gembao, Cretopia. Section 7 has a note for each game.

Each game also has its own short privacy page:

It does not cover Google Play itself, Google's own services, or websites that ads may link to. Those have their own policies.

3. The website

Contact form

When you send a message we receive the email address you enter, an optional name, the topic you pick, your message and the time it was sent. We use these only to reply and to resolve what you asked about. Messages are delivered to our studio inbox by email through Cloudflare; the website keeps no separate database of submissions.

The form is protected by Cloudflare Turnstile, which checks that a submission comes from a real browser. Turnstile may process technical signals such as your IP address and browser characteristics for that purpose (see Cloudflare's privacy policy). Please do not include passwords, payment details, government IDs or other sensitive information in a message.

Hosting and technical logs

The site is served by Cloudflare Workers. Cloudflare processes IP addresses, request headers and timing data to deliver pages, cache them and block abuse. We do not build visitor profiles from this data.

Stored in your browser

Three small items may be kept in your browser's local storage, none of which is sent to us: your theme choice (blueburp-theme), your analytics choice (blueburp-consent) and your best score in the in-browser 2048 demo (blueburp-2048-best). See the cookies and consent page.

4. Google Analytics on the website

We use Google Analytics 4 to count visits and understand which pages are useful. It runs only if you choose "Allow analytics" in the banner. Until then, and if you decline, no Analytics script loads and no Analytics cookies are set (we use Google Consent Mode with everything denied by default).

If you allow it, Google sets cookies such as _ga and _ga_* and receives your page views, approximate location derived from your IP address (Google Analytics 4 does not log or store full IP addresses), device and browser type and referring site. Google Signals, advertising features and user-ID tracking are switched off. We keep event data for the shortest period Google offers (2 months).

You can change your mind any time through "Privacy choices" in the footer. Google explains its processing at How Google uses information from sites or apps that use our services.

5. Our games

Every BlueBurp game follows the same rules:

  • No accounts. You never sign in, and we never ask for your name, email or phone number inside a game.
  • Progress stays on your device. Scores, settings and game progress are saved in the game's private storage on your phone. Uninstalling the game removes them. We cannot see or recover them.
  • No in-app purchases, no subscriptions. Our games are free and supported by ads.
  • Permissions. The games use internet and network-state access to load ads. Google's ads SDK also adds the advertising ID permission and a few routine system permissions that do not show a prompt. The games do not request your contacts, precise location, camera, microphone, files or phone number. Some games ask permission to show local reminder notifications made on your phone, with no data sent.
  • No analytics or crash-reporting SDKs are included in our games at this time. If a future game adds one, this policy and the game's Google Play Data safety form will say so before release.

Google Play may collect installation, crash and usage statistics independently under Google's privacy policy.

6. Advertising with Google AdMob

Our games show ads served by Google AdMob (the Google Mobile Ads SDK). To do this, Google and its certified ad partners may collect and use information from your device, including:

  • your advertising ID (a resettable identifier Android provides for ads) and, where applicable, the app set ID;
  • your IP address, from which an approximate location may be derived;
  • device and app information: device model, operating system, language, screen size, app name and version;
  • ad interaction data: which ads were shown, viewed or tapped, and diagnostic information.

Google uses this to serve and measure ads, to detect fraud and, where you have allowed it, to personalise ads. Third parties may use identifiers and IP addresses to collect information through ad serving in our games. Google describes this in its Mobile Ads SDK data disclosure, its advertising page and privacy policy.

Your ad choices:

  • In the EEA, the UK and Switzerland, the game shows Google's consent form (User Messaging Platform) when Google requires it. You can decline and still play the whole game. Google may then show non-personalised or limited ads, or no ads. You can change your choice at any time in the game under Settings → Privacy Options.
  • In US states with privacy laws, the game can show Google's "Do Not Sell or Share My Personal Information" option. You can reopen it from Settings → Privacy Options.
  • On any Android device you can reset or delete your advertising ID and opt out of ads personalisation under Settings → Google → Ads (or Settings → Privacy → Ads). Deleting the ID stops personalised ads across apps.
  • Google's Ads Settings controls personalisation for signed-in Google accounts.

Ads lead to third-party sites and apps with their own privacy practices. If an ad looks inappropriate or misleading, tell us through the contact form with the game name and what the ad showed, and we will report it to Google.

7. Game-by-game notes

2048 Tilewick

Package name com.vivekkumar.games.twentyfortyeight. Number puzzle. Intended for players aged 13 and above. Free. Optional reward videos in Challenge mode only. No in-app purchases, no subscriptions.

  • Game progress, settings and best scores are stored only on your device. Uninstalling the game deletes them.
  • There is no account, sign-in, chat, leaderboard or cloud save.
  • The only ads are optional reward videos in Challenge mode. You choose to watch one for three extra Undo. Classic mode has no ads. Ad content is limited to a PG rating.
  • The game links to this policy from Settings → About → Privacy Policy.
  • Ads are served by Google AdMob; see the AdMob section of this policy.

Full privacy page for Tilewick

Full privacy page for Tilewick

Gembao

Package name com.blueburp.gembao. Retro platformer. Intended for players aged 13 and above. Free. The only ads are optional reward videos. No in-app purchases and no subscriptions.

  • Game progress, stars, lives, scarf colours and settings are stored only on your device. When you uninstall the game, this data is deleted.
  • There is no account, sign-in, chat, leaderboard or cloud save. Android backup does not copy the game save.
  • The lives timer uses the clock of your device. It sends no data to us.
  • The only ads are optional reward videos. A video starts only when you tap its button. A video gives 1 life, a stage skip, a bonus gem hint or a scarf colour for Bao. Ad content is limited to a PG rating.
  • The game opens this policy from Settings → Privacy Policy. Where Google requires it, Settings → Privacy Options lets you change your ad choices.
  • Google AdMob supplies the ads. See the AdMob section of this policy.

Full privacy page for Gembao

Full privacy page for Gembao

Cretopia

Package name com.blueburp.cretopia. Beat 'em up. Intended for players aged 13 and above. Free. The only ads are optional reward videos. No in-app purchases and no subscriptions.

  • Game progress and settings are stored only on your phone. There is no account or sign-in.
  • The only ads are optional reward videos. You choose whether to watch them. You can watch a maximum of 15 a day.
  • Google AdMob supplies the ads. The game uses Google consent (User Messaging Platform, or UMP) where required. See the AdMob section of this policy.
  • On Android 13 or newer, the game asks once for permission to show a local daily reminder notification at 18:00. The reminder is made on your phone. It sends no data. You can turn it off in Settings.

Full privacy page for Cretopia

Full privacy page for Cretopia

8. Children and age

Our games and this website are made for a general audience aged 13 and above and are not directed at children. We do not knowingly collect personal data from children under 13. Our games are listed on Google Play for ages 13 and over, are not designed for children, and limit ad content to a PG rating. If you believe a child has sent us personal data, contact us and we will delete it.

If you are under 18 (a "child" under Indian law), use our games only with the consent of a parent or guardian. Parents can turn off ads personalisation and reset the advertising ID in the device settings described in section 6, and can use Google Play's parental controls. The website contact form should be used by adults; a parent or guardian can write on a younger player's behalf.

9. Your rights and choices

Wherever you live, you can ask us to:

  • tell you what personal data we hold about you (for most people: only the emails you sent us);
  • correct or delete it;
  • withdraw consent for analytics (footer → Privacy choices) or for personalised ads (section 6);
  • raise a grievance about how we handled your data.

Use the contact form and choose "Privacy or data request". We verify requests by replying to the email address the data is linked to. We aim to respond within 30 days and will never take longer than the law allows.

10. India: the Digital Personal Data Protection Act, 2023

We are based in India and treat the DPDP Act, 2023 and the DPDP Rules, 2025 as our baseline, including obligations that come into force in stages. In particular:

  • Notice and consent. This policy and the in-game and on-site prompts are the notice. Analytics runs only with your consent; contact-form data is processed for the purpose you contacted us about; ads are served under Google's consent and settings described above. Consent can be withdrawn as easily as it was given.
  • Purpose limitation and minimisation. We collect the least data needed for each purpose and nothing for resale. We do not sell personal data.
  • Rights of the Data Principal. Access, correction, erasure, grievance redressal and the right to nominate a person to exercise these rights, as set out in section 9.
  • Grievance officer. Vivek Kumar, reachable through the contact form. If you are not satisfied with our response you may approach the Data Protection Board of India.
  • Children. See section 8. We do not undertake tracking or targeted advertising directed at children.

11. EEA, UK and other regions

EEA, UK and Switzerland. Our legal bases are consent (analytics; personalised ads, collected through the in-game consent form), legitimate interests (keeping the site and games secure, answering your messages, showing non-personalised ads) and legal obligations. You have the rights to access, rectification, erasure, restriction, portability and objection, and may complain to your local supervisory authority. We have no EU representative; contact us directly.

United States. We do not sell personal information and do not use it for cross-context behavioural advertising ourselves. Ads personalisation is controlled through your device's ad settings and Google's controls.

Brazil, and elsewhere. Where local law gives you additional rights, we honour them on request.

12. Retention and deletion

  • Contact emails: kept for up to 24 months after the conversation ends so we can follow up on bugs and requests, then deleted. Privacy requests are kept as long as needed to show we handled them.
  • Analytics: event data retained by Google for 2 months; aggregated reports contain no personal data.
  • Game data: lives on your device; uninstalling the game deletes it.
  • Advertising data: held by Google under its own retention rules; resetting your advertising ID breaks the link to past data.
  • Hosting logs: retained by Cloudflare for a short period under its policies.

13. Security and international transfers

The website is served over HTTPS only, the contact endpoint is rate-limited and bot-checked, and our inbox is protected with two-factor authentication. No method is perfect; if we learn of a breach affecting you, we will tell you and the relevant authority as the law requires.

Our providers (Cloudflare, Google) operate servers worldwide, so your data may be processed outside India or your home country. They do so under their own safeguards, including standard contractual clauses for EEA and UK data.

14. Changes and contact

We update this policy when a game, a provider or the law changes. The "last updated" date at the top tells you when. Material changes to how a game handles data are reflected in that game's Google Play Data safety form before the update ships.

Questions: contact form. Developer: Vivek Kumar, BlueBurp Studio, India.